20 days ago
Doha, QatarMid Level
Responsibilities
- Conduct penetration tests on web applications, mobile applications, APIs, and thick-client applications.
- Prepare detailed reports with actionable vulnerability-remediation recommendations.
- Implement and manage automated SAST, DAST, and SCA security-scanning tools.
- Perform threat modeling and provide guidance on mitigating application security risks.
- Review application code for security vulnerabilities across multiple platforms.
- Develop and deliver application-security training sessions and workshops.
- Evaluate and recommend tools and technologies for security testing and monitoring.
- Create and maintain documentation for security assessments, vulnerability management, and security policies.
Requirements
- Bachelor’s or college degree in Computer Science, Information Security, or a related field.
- At least 2 years of experience in application security, software development, or a related field.
- Proficiency with Burp Suite is required; experience with Fortify, SonarQube, and Postman is preferred.
- Strong understanding of secure coding practices and experience with at least one programming language.
- In-depth knowledge of application security principles and practices.
- Familiarity with OWASP Top 10, ASVS, MASVS, WSTG, and MSTG security frameworks and guidelines.
- Relevant certifications such as BCSP, OSWA, OSWE, eWPT, eWPTX, or SEC542 are highly desirable.
- Familiarity with DevSecOps practices and CI/CD pipelines is a plus.
Tech Stack
PostmanSonarQube
Categories
About Malomatia
Malomatia is a Doha-based IT services and systems integration firm that delivers consulting, managed services, contact center operations, and enterprise solutions in cybersecurity, cloud, and AI for government and regulated industries in Qatar. The company builds and operates mission-critical platforms, including Oracle and other cloud environments, and provides SLA-driven support. Founded in 2008, it focuses on national digital programs and large public-sector modernization initiatives.